An integer overflow or wraparound flaw exists in Adobe Acrobat Reader up to and including version 26.001.21651. The overflow can cause the application to crash, resulting in a denial‑of‑service condition. The vulnerability is classified as CWE‑190 and does not allow arbitrary code execution or privilege escalation; the effect is limited to terminating the reader process.

Adobe Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier releases are vulnerable.

With a CVSS score of 5.5, the weakness is considered moderate. EPSS data is currently unavailable and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a user to open a malicious PDF, so an attacker must first lure or persuade the target to view the file. Once the file is processed, the reader crashes, leading to a DoS on the application. Because it is not an active remote exploit, the risk is lower but still significant for users who frequently open unknown documents.